Tuesday, June 1, 2010

Mal-intent may be the future of security

The Sacramento Bee
This isn't related to identity management or biometrics but it is related to security.

Biometrics are used to establish a person's identity with a high degree of confidence so that the entity making the identification can accomplish further goals.

Identifying mal-intent does not seek to identify an individual but rather it seeks to predict undesired behavior through the detection of other behaviors.

Interestingly, both types of system represent attempts to predict the future.

One system -- the biometric one -- attempts to predict the future based on the identification of trusted or untrusted individuals. The assumption is that if I know who you are, I can make an educated prediction about what you will do.

The behavioral system, attempts to predict the future based upon what someone is doing now. If I know that people who do what you are doing tend to progress to other sorts of behavior, I can predict that you will also progress to that behavior. Or can I?

That's what the scientists are trying to figure out. Can you automate the judgments made by highly trained human observers of human behavior? Do people like Dr. Lightman from 'Lie to Me' exist? If so, can what they do be automated?